Privacy Policy

Last updated: July 9, 2026

Reprixo is a repricing tool for Amazon sellers. This policy describes what data we process, how and why, in relation to the integration with the Amazon Selling Partner API (SP-API), in compliance with the Amazon Data Protection Policy and Regulation (EU) 2016/679 (GDPR).

1. Data controller

Reprixo (a Lytta project) - VAT 04896150614 - Via Roma 14, 81055 Santa Maria Capua Vetere (CE), Italy.
For any data-related request: privacy@reprixo.com.

2. Data we process

Through SP-API, upon the seller's explicit authorization (OAuth/Login with Amazon), we access data of only the account of the seller who connects to us:

Catalogs and listings (SKU, ASIN, titles, status);
Own prices and public competitor prices/offers (Buy Box);
Stock and fulfillment status (FBA/FBM);
Order data and the seller's financial data (amounts, quantities) used for sales and margin metrics;
Seller account health metrics.

We do not deliberately collect or store buyers' personal data (PII). The app does not request the direct-to-consumer shipping or buyer-communication roles.

3. Purposes

Data is used exclusively to provide the service to the seller: automatic price calculation and updates, margin and sales analysis, operational alerts. We do not use the data for any other purpose.

4. How we protect data

Encryption in transit: all communications happen over HTTPS/TLS.
Encryption at rest: access credentials (tokens) are encrypted in the database.
Least privilege: we request only the SP-API permissions needed and isolate each seller's data.
No sharing: we do not sell or share data with third parties.

Data is hosted on servers located in the European Union; database backups are kept in protected form (access tokens remain encrypted in backups too). The website uses only technical session cookies, with no tracking or profiling. In the event of a security incident involving the data, we follow response and notification procedures consistent with the Amazon Data Protection Policy and the GDPR.

5. Retention and deletion

We retain data for as long as needed to provide the service. The seller can revoke authorization at any time (from Seller Central or by requesting disconnection): upon revocation the access tokens are deleted. We delete data obtained through SP-API ("Amazon Information") within 30 days of the request or of when it is no longer needed for the service, unless otherwise required by law; data also leaves backup copies within the relevant rotation period. On request to privacy@reprixo.com we delete the data associated with the account.

6. Your rights (GDPR)

You have the right to access, rectification, erasure, restriction and portability of your data, and to object to processing. To exercise them, write to privacy@reprixo.com.

7. Changes

Any updates to this policy will be published on this page with the new revision date.